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Top Stories 

• HSBC Finance Corporation notified at least 1,000 mortgage account customers in New 
Hampshire, California, Maine, Massachusetts, and Alabama, that their personal data had 
been inadvertently compromised in a breach discovered March 27- Softpedia (See item 5) 

• Authorities reopened the Greenbelt Metro station and Green Line service between College 
Park and Greenbelt stations resumed April 16 after a 15-hour closure that resulted when a 
pedestrian bridge fell onto Metro and MARC train tracks in Prince George’s County, 
Maryland, April 15 - WTOP 103.5 FM Washington, D.C. (See item 6) 

• Two U.S. Army National Guard members were arrested in San Diego, California, April 15 
for allegedly attempting to sell guns, body armor, and military ammunition to purported 
Mexican drug cartel members. - CNN (See item 19 ) 

• An investigation into a January breach at the Metropolitan State University in Minnesota 
concluded the week of April 13 and found that a hacker likely exposed the personal 
information of up to 160,000 students. - Minneapolis Star-Tribune (See item 20 ) 
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Energy Sector 



1. April 15, Portland Tribune - (Utah) PacifiCorp closes a coal plant. Portland-based 
PacifiCorp closed its Carbon Plant (Castle Gate Plant) in Utah April 15 due to 
economic and financial reasons as part of the company’s plan to shift to lower-carbon 
energy sources. 

Source: http://portlandtribune.com/sl/256965-127968-pacificorp-closes-a-coal-plant- 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

2. April 15, Pittsburgh Post-Gazette - (Pennsylvania) Malfunction forces partial 
shutdown at FirstEnergy’s Beaver Valley Plant. FirstEnergy Corp., reported April 
15 that operators at the Beaver Valley Nuclear Power Station in Shippingport, 
Pennsylvania, shut down the plant’s Unit 1 reactor after noticing anomalies caused by a 
bearing failure in a non-radioactive water pump for the reactor. The company will 
inspect the reactor before restarting it at half-power within a few days. 

Source: http://powersource.post-gazette.com/powersource/companies- 
po wersource/20 1 5/04/ 1 5/0 vemi ght-malfunction-forces-partial-shutdo wn-at- 
FirstEnergy-s -Beaver- V allev-nuclear-plant/stories/20 1504 150209 

3. April 15, Chattanooga Times Free Press - (Alabama) TVA completes refueling of 
Browns Ferry Nuclear Plant. Officials from the Tennessee Valley Authority reported 
that the Browns Ferry Nuclear Plant’s Unit 2 reactor in Alabama returned to full 
service April 10 after successfully completing a 27 -day scheduled refueling and 
maintenance project. Crews installed 260 new fuel assemblies in the reactor core and 
completed 12,250 work activities during the outage. 

Source: http://www.timesfreepress.com/news/local/storv/2015/apr/15/tva-completes- 
refueling-browns-ferry-nuclear-plant/298858/ 
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Critical Manufacturing Sector 

Nothing to report 
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Defense Industrial Base Sector 
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Nothing to report 
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Financial Services Sector 

4. April 15, KDKA 2 Pittsburgh - (Pennsylvania) FBI offering reward for info leading 
to capture of ‘North Hills Bandits’ bank robbery suspects. The FBI is offering a 
$10,000 reward for information leading to the arrest of 2 robbery suspects, dubbed the 
“North Hills Bandits,” who carried out armed robberies at 3 banks in the North Hills 
area of Pittsburgh since January. FBI agents reported that the suspects appeared to have 
former firearms training and used different vehicles in each robbery. 

Source: http://pittsburgh.cbslocal.com/2015/04/15/fbi-offering-reward-for-info-leading- 
to-capture-of-north-hills-bandit-bank-robbery-suspects/ 

5. April 15, Softpedia - (National) HSBC Finance Corporation exposes mortgage 
account info. HSBC Finance Corporation notified at least 1,000 mortgage account 
customers in States including New Hampshire, California, Maine, Massachusetts, and 
Alabama, that the company inadvertently published names, Social Security numbers, 
account numbers, and other personal data in a breach that was discovered March 27. 
The data was immediately secured following the discovery, law enforcement was 
notified, and HSBC offered all impacted customers a free one-year subscription to 
Identity Guard services. 

Source: http://news.softpedia.com/news/HSBC-Finance-Corporation-Exposes- 
Mortgage- Account- Info-47 8445 .shtml 
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Transportation Systems Sector 

6. April 16, WTOP 103.5 FM Washington, D.C. - (Maryland) Bridge collapses onto 
Metro, MARC train tracks in Prince George’s Co. The Washington Metropolitan 
Area Transit Authority’s Greenbelt Metro station reopened and Green Line service was 
restored between College Park and Greenbelt stations April 16 after being closed for 
approximately 15 hours while crews worked to make repairs after a pedestrian bridge 
fell onto Metro and Maryland Area Regional Commuter train tracks in Prince George’s 
County April 15. No injuries were reported. 

Source: http://wtop.com/prince-georges-countv/2015/04/bridge-collapses-onto-metro- 
marc-train-tracks-in-prince-georges-co/slide/1/ 

7. April 16, KMGH 7 Denver - (Colorado) Cars on top of cars: 2 dead in multi-vehicle 
1-25 crash near Mead. Northbound lanes of Interstate 25 near Mead reopened after 
being closed for several hours while officials investigated a multi- vehicle crash that 
killed 2 people April 15. The cause of the crash remains unknown. 

Source: http://www.thedenverchannel.com/news/local-news/l-dead-in-multi-vehicle-i- 
25-crash-near-mead 
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8. April 16, Wilmington News Journal - (Delaware) Fiery wrong-way crash on NB 1-95 
kills one. All northbound lanes of Interstate 95 near Newark reopened April 16 after 
being closed for approximately 4 hours while officials cleared the scene of a fiery 3- 
vehicle wrong-way crash that killed 1 person. The accident remains under investigation 
by the Delaware State Police Crash Reconstruction Unit. 

Source: http://www.delawareonline.com/story/news/traffic/2015/04/16/crash-closes-nb- 
maryland-line/25865635/ 

9. April 16, Associated Press - (Maine) Maine to get more than $138,000 for Highway 
Safety Initiatives. The National Highway Traffic Safety Administration issued the 
Maine Bureau of Highway Safety 2 grants totaling more than $138,000 aimed at 
improving highway and traffic safety. The grants will be used to improve emergency 
services, increase safety for pedestrians, bicyclists, and motorcycle riders, and reduce 
impaired and unsafe driving, among other things. 

Source: http://news.mpbn.net/post/maine-get-more-138000-highwav-safety-initiatives 

10. April 15, Associated Press- (Kansas) Regional jet with 84 onboard safely makes 
emergency landing at Wichita. A plane operated by Mesa Airlines for American 
Airlines that was headed to Dallas-Fort Worth returned to Wichita Dwight D. 
Eisenhower National Airport and safely made an emergency landing after the aircraft 
experienced cabin pressurization problems shortly after takeoff April 15. 

Source: http://www.kansas.com/news/local/article 1 8622482.html 

11. April 15, Dickinson Press - (North Dakota) Tanker rollover causes Highway 200 
closure near Alexander. North Dakota Highway 200 near Alexander reopened April 
14 after being closed for more than 4 hours while crews cleared the scene of an 
accident involving an overturned semi-truck loaded with propane. 

Source: http://www.thedickinsonpress.com/news/local/3723063-tanker-rollover-causes- 
highway-200-closure-near-alexander 
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Food and Agriculture Sector 

12. April 16, WTTV 4 Bloomington - (Indiana) Four people hurt after grain elevator 
explosion in LaPorte County. Four people were injured by an explosion at a Co- 
Alliance LLP-owned grain elevator in LaPorte County April 16. The grain elevator 
suffered significant structural damage as a result of the blast. 

Source: http://cbs4indv.com/2015/04/16/four-people-hurt-after-grain-elevator- 
explosion-in-laporte-county/ 

13. April 16, U.S. Food and Drug Administration - (Ohio) Solutions At Work, Inc. issues 
allergy alert on undeclared raw cashews in Cleveland Crops Chili Cheezy Kale 
Chips. The U.S. Food and Drug Administration reported April 16 that Solutions At 
Work, Inc., issued a recall for its Cleveland Crops Chili Cheezy Kale Chips due to 
undeclared raw cashews. The recalled products were individually packaged in 2-ounce 
pouches and were distributed at three Cleveland, Ohio retail stores. 
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Source: ww w .fda. gov/S afety/Recalls/ucm443029 .htm 



14. April 15, U.S. Department of Agriculture - (Arkansas) B & R Meat Processing, Inc. 
recalls products due to nitrite levels in excess of regulatory limit. The Food Safety 
and Inspection Service announced April 15 that B & R Meat Processing, Inc., recalled 
about 569 pounds of cured pork products due to nitrite levels that exceed regulatory 
levels. The recalled products were shipped to retailers throughout Arkansas. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/2015/recall-062-2015-release 



15. April 14, Arkansas Democrat-Gazette - (Arkansas) Health Department: Hepatitis A 
exposure possible at Subway in Morrilton. The Arkansas Department of Health 
advised April 14 that patrons of a Subway restaurant in Morrilton seek preventative 
treatment due to possible Hepatitis A exposure that could have occurred between 
March 25 and April 5 when a worker on duty was infected with the virus. 

Source: http://www.arkansasonline.com/news/2015/apr/14/health-officials-hepatitis- 
exposure-possible-morri/ 
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Water and Wastewater Systems Sector 

See items 30 and 32 
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Healthcare and Public Health Sector 

Nothing to report 
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Government Facilities Sector 

16. April 16, Associated Press; WRC 4 Washington, D.C. - (Washington, D.C.) Man in 
custody after gyrocopter lands on Capitol grounds. A Florida man was arrested by 
U.S. Capitol Police April 15 after flying over and landing a gyrocopter on the grounds 
of the U.S. Capitol building in Washington, D.C., prompting the building and visitor 
center to be locked down for 2 hours before authorities cleared the scene. The man had 
allegedly been plotting the incident since 2013. 

Source: http://www.nbcwashington.com/news/local/Small-Helicopter-Lands-on- 
Capitol-Grounds-299870 1 1 1 .html 

17. April 16, WLWT 5 Cincinnati - (Ohio) Police: Man stole 176 school bus batteries. 
Authorities arrested and charged a man for allegedly stealing 176 batteries worth nearly 
$15,000 from school buses by breaking into the First Student bus lot in Linwood. 
Source: http://www.wlwt.com/news/man-arrested-in-connection-with-school-bus- 
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battery-thefts/3239 1518 



18. April 15, WWTV 9 CadillacfWWUP 10 Sault Ste. Marie - (Michigan) Ruptured gas 
line causes Cheboygan County schools to evacuate. A gas line rupture April 15 
prompted the closure of Cheboygan County Area Schools in Michigan, April 16 
following the evacuation of the high school, middle school, and bus garage when a 
student driver lost control and hit a high power gas line. 

Source: http://www.9andl0news.com/story/28813353/ruptured-gas-line-causes- 
cheboygan-county-schools-to-evacuate 

19. April 15, CNN - (International) Feds say National Guardsmen tried to sell guns, 
ammo to cartel. Two U.S. Army National Guard members were arrested in San Diego 
April 15 for allegedly attempting to sell guns, body armor, and military ammunition to 
purported Mexican drug cartel members. The Guardsmen were supposedly caught in a 
sting operation run by agents with the Bureau of Alcohol, Tobacco, Firearms and 
Explosives (ATF) after making more than a dozen sales of firearms and stolen military 
ammunition to informants working with the ATF. 

Source: http://www.cnn.com/2015/04/15/politics/national-guardsmen-sell-guns-ammo- 
cartels/index.html 



20. April 15, Minneapolis Star-Tribune - (Minnesota) Computer hacker likely exposed 
data of 160,000 at Metropolitan State University. An investigation into a January 
breach at the St. Paul-based Metropolitan State University concluded the week of April 
13 and found that a hacker broke into the university’s database and likely exposed the 
personal information of as many as 160,000 current, former, and potential students. The 
investigation also found that about 11,000 students had portions of their Social Security 
numbers accessed. 

Source: http://www.startribune.com/local/299858391.html 

21 .April 15, KNSD 39 San Diego - (California) Student arrested for break-in, arson at 
school. Authorities arrested a student in connection with a break-in and arson at the 
Clairemont High School in San Diego that prompted the cancelation of classes April 15 
after a small fire was discovered inside a custodial closet in a chemistry room. Police 
are still searching for a second suspect who was seen running from the school. 

Source: http://www.nbcsandiego.com/news/local/Clairemont-High-School-Burglary- 
Chemistry-Lab-Fire-299838 1 6 1 .html 
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Emergency Services Sector 

22. April 15, Hendersonville Times-News - (North Carolina) ‘Human error’ caused 911 
outage last week. Officials with E-911 Communications in Henderson County, North 
Carolina, reported April 15 that a 12-hour outage of the county’s emergency 9-1-1 
system was due to an error at Colorado-based system provider Intrado Inc. The 
company stated that there were portions of the monitoring system that were not 
completely installed, and that an individual attempted to transfer large files from one 
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piece of equipment to another, causing the outage. 

Source: http://www.blueridgenow.com/article/20150415/ARTICLES/15Q419928/-l/ 
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Information Technology Sector 

23. April 16, Softpedia - (International) Current threat prevention systems are not 
enough protection for enterprises. Findings from a recent study in automated breach 
detection carried out by security researchers at Seculert revealed that gateway solutions 
at participating Fortune 2000 enterprises only blocked 87 percent of communications 
from compromised devices within their networks. The report also found that about 2 
percent of devices in organizations were compromised by malware while nearly 
400,000 interactions that were generated went undetected, among other findings. 
Source: http://news.softpedia.com/news/Current-Threat-Prevention-Systems-Are-Not- 
Enough-Protection-for-Enterprises-47 8567 . shtml 

24. April 16, Softpedia - (International) Company employees not sufficiently trained to 
avoid phishing, study finds. A survey commissioned by Intel Security of 700 
respondents in businesses across multiple continents revealed that 38 percent of 
information technology and security professionals believe vulnerability to social 
engineering is a significant factor in the success of attacks and that threat actors’ use of 
multiple attack vectors, exploits, and payloads makes defending against attacks 
difficult, among other findings. 

Source: http://news.softpedia.com/news/Companv-Emplovees-Not-Sufficientlv- 
Trained-to-Avoid-Phishing-Study-Finds-478564.shtml 

25. April 16, Help Net Security - (International) TeslaCrypt ransomware pushed by 
several exploit kits. Security researchers discovered that threat actors are distributing a 
new ransomware called TeslaCrypt via the Angler, Sweet Orange, and Nuclear exploit 
kits (EKs), which encrypts the typical assortment of file types along with those related 
to video games and game-related software, and iTunes-related files. Users have been 
targeted via redirects to compromised WordPress Web sites and hosts running 
vulnerable out-of-date Adobe Flash plugins. 

Source: http://www.net-security.org/malware news.php?id=3019 

26. April 15, IDG News Service - (International) AirDroid app fixes severe 
authentication vulnerability. AirDroid fixed a severe authentication software flaw in 
its Web interface affecting versions 3.0.4 and earlier, that could have allowed attackers 
to take over a device running the software by sending targets a malicious link over 
short message service (SMS) which exploit the app’s use of JavaScript Object Notation 
(JSONP) to request data from a server in a different domain. 

Source: http://www.networkworld.com/article/2910753/airdroid-app-fixes-severe- 
authentication- vulnerability . html 
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Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT IS AC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

27. April 15, WFAA 8 Dallas - (Texas) Walmart employee accused of stealing $240K. A 
former employee at a Walmart store in Decatur, Texas, was arrested and charged April 
15 for allegedly stealing about $240,000 worth of property between January 2013 and 
October 2014 by creating fake returns to pocket the refunds. The store began to 
investigate in October 2014 where the suspect admitted to stealing from the store’s cash 
office and to stealing up to $8,000 in merchandise in a day. 

Source: http://www.wfaa.com/storv/news/crime/2015/04/15/wal-mart-emplovee- 
accused-of-stealing-nearly-240k/25820299/ 

28. April 15, WPX1 11 Pittsburgh - (Pennsylvania) Van crashes into Pittsburgh 
doughnut shop, 2 customers hurt. Two patrons of the Better Maid Donuts shop in the 
Crafton Heights area of Pittsburgh were injured when a driver lost control of his 
vehicle and crashed into the store April 15. The area was closed for about 2 hours while 
crews removed the vehicle from the shop. 

Source: http://www.wpxi.com/news/news/local/car-crashes-pittsburgh-doughnut- 
shop/nktfN/ 

29. April 15, Arlington Heights Daily Herald - (Illinois) Officials: One hurt, 20 displaced 
by Lake in the Hills fire. An April 15 fire at a condominium building in Lake in the 
Hills displaced about 20 residents from 18 damaged units and left 1 person injured. The 
cause of the fire remains under investigation. 

Source: https://www.dailvherald.com/article/20150415/news/150419233/ 
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Dams Sector 



30. April 16, Sacramento Bee - (California) California to build temporary Delta Dam. 
The California Department of Water Resources announced April 15 plans to install a 
temporary rock barrier dam in Sacramento-San Joaquin Delta to prevent a worst-case 
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scenario in which Delta waters become too salty for the 25 million Californians and 3 
million acres of farmland that depend on it. Officials hope to install the $28 million 
dam in May and remove it by the end of October. 

Source: http://www.sacbee.com/news/local/articlel8636900.html 

31 .April 15, Associated Press - (Louisiana) Eastern New Orleans gets levees approved 
by FEMA. The Southeast Louisiana Flood Protection Authority-East announced April 
14 that the Federal Emergency Management Agency certified 2 non-Federal levee 
segments in New Orleans that will fall inside the larger flood protection system built by 
the Army Corps of Engineers to help keep flood insurance rates from spiking in the 
area. The New Orleans East Business Association reported April 15 that two other non- 
Federal levee segments in New Orleans are also under review for certification. 

Source: 

http://www.nola.com/environment/index.ssf/2015/04/eastem new Orleans gets levee. 
html 

32. April 15, WLWT 5 Cincinnati - (Ohio) New rules in place at Ohio lake with 

deteriorating dam. The Ohio Department of Natural Resources set new construction 
and dock usage policies for Buckeye Lake April 14 in an effort to protect the dam’s 
remaining structural integrity and prevent additional erosion due to the dam’s high risk 
of failure. Officials reported that the dam will remain at winter levels until it is 
replaced, rendering the State-owned docks at Buckeye Lake unavailable to residents in 
2015. 

Source: http://www.wlwt.com/news/new-rules-in-place-at-ohio-lake-with- 
dctcriorating-dam/32383420 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 
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restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 




- 10 - 




